top of page

Privacy Policy & Data Protection

Policy Scope & Overview

Leta Digital is committed to ensuring digital accessibility for all users, regardless of visual, auditory, motor, or cognitive ability. We continually optimize the user experience across our digital properties in strict accordance with WCAG 2.1 Level AA standards, the UK Equality Act 2010, the Public Sector Bodies (Websites and Mobile Applications) Accessibility Regulations 2018, and the European Accessibility Act (EAA).

 

Data Controller & Entity Details

Leta Digital acts as the primary Data Controller for all personal data gathered via this website and associated operational services.

  • Legal Entity Name: Leta Digital

  • Registered Address: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom

  • Data Protection Enquiries: letadigitalteam@gmail.com

  • Supervisory Authority: Information Commissioner's Office (ICO), United Kingdom

​

Key Legal Definitions

To ensure transparency, key terms utilized throughout this policy carry specific statutory definitions under UK data protection legislation:

​

  • Data Controller: The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of processing personal data.

  • Data Processor: A natural or legal person, public authority, agency, or other body which processes personal data on behalf of, and strictly on the written instructions of, the Data Controller.

  • Personal Data: Any information relating to an identified or identifiable natural person ("Data Subject") who can be directly or indirectly identified, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier.

  • Special Category Data: Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, or data concerning health or sex life.

​​

​

Categories of Personal Data Collected

We collect personal information directly from individuals through form submissions, service engagement, and automated technical tracking. The categories of data processed include:

  • Identity & Contact Data: First name, last name, business email address, direct phone number, job title, and company name provided during client onboarding or inquiry workflows.

  • Transaction & Commercial Data: Billing addresses, service subscription records, invoice histories, and payment processing tokens managed via PCI-DSS compliant third-party payment gateways.

  • Technical & Usage Data: Internet Protocol (IP) addresses, browser type and version, time zone setting, operating system, session durations, clickstream paths, and page interaction metrics collected automatically via platform logs.

  • Marketing & Communications Data: Communication preferences, consent state logs, event registration details, and correspondence records with our client services team.

We do not intentionally collect Special Category Data or criminal conviction history through our website or routine agency workflows.

​

Lawful Basis for Data Processing

Under Article 6 of the UK GDPR, Leta Digital processes personal information only where a specific legal justification exists:

  • Contractual Necessity (Article 6(1)(b)): Processing essential to execute, maintain, or fulfil service contracts and project engagements entered into with client organisations.

  • Legitimate Interests (Article 6(1)(f)): Processing required to advance our legitimate operational interests, including platform optimisation, network security, business-to-business communications, and direct marketing, provided these interests do not override fundamental individual rights.

  • Legal Obligation (Article 6(1)(c)): Processing necessary to comply with statutory legal requirements, tax reporting via HMRC, regulatory compliance, and official law enforcement directives.

  • Consent (Article 6(1)(a)): Express opt-in consent recorded for specific electronic marketing subscriptions, non-essential cookies, and audience profiling. Consent may be withdrawn at any time.

​

 Cookie Protocols & Tracking Mechanics

Our website utilizes essential, analytical, and functional cookies alongside similar tracking mechanics (such as web beacons and scripts) to optimize system performance and evaluate site interactions.

  • Essential Cookies: Strictly necessary for platform navigation, security validation, and load balancing. These cannot be toggled off in our systems.

  • Analytical & Performance Cookies: Aggregated, pseudonymous metrics powered by service providers (such as Google Analytics) to analyze audience interactions and technical performance.

  • Preference & Functional Cookies: Remember user preferences, locale settings, and interactive selections to deliver a tailored browsing experience.

Users may adjust cookie preferences at any time via our site consent banner or browser security settings. Disabling essential cookies may impair core website functionality.

​

Information Sharing & Third-Party Processors

Leta Digital does not sell, rent, or trade personal data under any circumstances. We share data only with vetted processors and external entities where necessary to deliver our services or comply with legal mandates:

  • Service Processors: Trusted suppliers providing infrastructure hosting, IT maintenance, payment handling, CRM operations, and email distribution under formal Data Processing Agreements (DPAs).

  • Professional Advisers: Legal counsel, auditors, accountants, and insurers acting as controllers or joint controllers to ensure corporate compliance and risk management.

  • Government & Regulatory Bodies: The Information Commissioner's Office (ICO), HM Revenue & Customs (HMRC), or statutory law enforcement agencies when required by law.

​

International Data Transfers

When transferring personal data outside the United Kingdom or European Economic Area (EEA), Leta Digital ensures robust contractual and technical safeguards are established. International transfers rely strictly on:

  • UK International Data Transfer Agreements (IDTAs) or the UK Addendum to EU Standard Contractual Clauses (SCCs).

  • Statutory Adequacy Regulations issued by the UK Secretary of State or European Commission.

​

Data Retention & Storage Security

We maintain appropriate technical and organizational measures to prevent unauthorized access, disclosure, alteration, or destruction of personal data. Data is retained only for as long as necessary to fulfil the collection purpose, satisfy business operations, or meet statutory legal retention limits (typically up to seven years for tax and corporate accounting records).

​

Your Statutory Data Subject Rights

Under the UK GDPR and Data Protection Act 2018, data subjects possess enforceable legal rights regarding their personal data:

  • Right of Access: Obtain confirmation of processing and a copy of personal data held by Leta Digital.

  • Right to Rectification: Request correction of inaccurate, incomplete, or outdated information.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of personal data where legal processing grounds no longer apply.

  • Right to Restrict or Object: Object to processing based on legitimate interests or restrict processing during dispute resolutions.

  • Right to Data Portability: Request structured, machine-readable transfer of provided personal data to another controller.

To exercise any of your privacy rights or request access to your personal data, please contact us at letadigitalteam@gmail.com. Our team will review your request and respond promptly to ensure your data is handled securely and transparently. 

Policy Version: 2.1 | Last Updated: September 2026

bottom of page